Overview

overview

10

Static

static

test.js

windows7-x64

10

test.js

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    test.js

  • Size

    609KB

  • Sample

    221218-mg84eaed61

  • MD5

    0dd3d7d195a7d45f24c1f86c25b8bd73

  • SHA1

    cb4142317dc5ca92ba2eee9aecc8809d34276ce4

  • SHA256

    cc17a222a8b6e268ef29c4e4de39390b77f23fc6c45ea21dc9191ac45f15aea6

  • SHA512

    63f0093605b0a4632a123dba5d999462025a6d99f9d2a310c53e0ab255526a297d3b370fae39c1f4b52ef1c591880fa90b0c45ab2fe8686f122c5c56b73023d0

  • SSDEEP

    3072:vTwFRFxmzUmKvOERglXIjl7U0lVJSpHOcdKzPaKjaFeMXnsM4MkY9WZY5i/1RgHj:v+67ykgieRJ4Xp8Gl+stC/MxiP1YfoO

Score
10/10
vjw0rmpersistencetrojanworm

Malware Config

Targets

    • Target

      test.js

    • Size

      609KB

    • MD5

      0dd3d7d195a7d45f24c1f86c25b8bd73

    • SHA1

      cb4142317dc5ca92ba2eee9aecc8809d34276ce4

    • SHA256

      cc17a222a8b6e268ef29c4e4de39390b77f23fc6c45ea21dc9191ac45f15aea6

    • SHA512

      63f0093605b0a4632a123dba5d999462025a6d99f9d2a310c53e0ab255526a297d3b370fae39c1f4b52ef1c591880fa90b0c45ab2fe8686f122c5c56b73023d0

    • SSDEEP

      3072:vTwFRFxmzUmKvOERglXIjl7U0lVJSpHOcdKzPaKjaFeMXnsM4MkY9WZY5i/1RgHj:v+67ykgieRJ4Xp8Gl+stC/MxiP1YfoO

    Score
    10/10
    vjw0rmpersistencetrojanworm

    • Vjw0rm

      Vjw0rm is a remote access trojan written in JavaScript.

      trojanwormvjw0rm

    • Blocklisted process makes network request

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Drops startup file

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks